Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
File:                     10e25f26-1142-4a43-8091-69f9ddd435c1.roa (raw, json)
Hash identifier:          DZMb8FVLPIPe/xYBRt//74Rc3F2dHqEGootAM7faPkQ=
Subject key identifier:   4A:12:5E:30:3A:A8:9E:4B:A7:3E:3B:AE:50:E6:87:3E:11:17:62:C3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2629E3631CCF9880E1707F4B086B7BE6926B467B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
Signing time:             Tue 02 Apr 2024 00:00:00 +0000
ROA not before:           Tue 02 Apr 2024 00:00:00 +0000
ROA not after:            Tue 07 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:e3:63:1c:cf:98:80:e1:70:7f:4b:08:6b:7b:e6:92:6b:46:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  2 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2024 GMT
        Subject: serialNumber=ced49013d0919e47bd5be5ecdce9dc3040b2fb693ff2ccec65e62dc9c712f23e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:05:f5:ea:7c:be:61:92:48:d1:4d:f6:41:
                    06:8f:0e:37:92:b9:9c:6d:80:cd:c8:ed:31:ae:15:
                    64:ec:09:a0:0a:23:0e:6f:96:75:da:72:03:1e:c2:
                    3b:a9:a0:7f:c2:cd:a3:5b:9e:1e:ff:da:0b:4d:98:
                    01:56:c7:57:ab:47:56:1b:a2:92:db:a3:89:30:9d:
                    71:d0:a2:f2:8a:84:c7:64:f8:23:1a:98:bc:a7:5f:
                    57:73:02:b2:aa:8b:e5:d4:f2:e0:59:27:d4:5a:ea:
                    41:5f:66:8c:a8:f7:7f:43:0a:d1:6f:ac:bc:06:d0:
                    78:0d:69:68:26:60:2d:3a:eb:4e:c9:96:bf:5a:55:
                    e1:5a:d4:e0:82:13:39:31:2e:a7:d4:56:7c:1c:f1:
                    96:a3:b2:7a:6d:f5:b1:af:4e:3b:e2:d5:bc:43:a3:
                    29:17:f8:da:9a:ed:da:73:12:b7:9e:4e:90:5d:b8:
                    fc:05:2b:a4:85:9d:24:48:40:7a:6a:6c:f7:08:99:
                    87:82:04:42:63:a1:00:a6:64:57:06:90:d6:7b:70:
                    2e:df:89:cd:7e:f3:18:f7:89:20:fa:9c:03:f4:0a:
                    d1:2b:ef:ed:d8:6d:38:43:41:e6:20:9d:5c:7c:4d:
                    fb:92:3b:ea:43:e5:a5:d4:0d:b0:ec:6f:f0:59:a1:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:12:5E:30:3A:A8:9E:4B:A7:3E:3B:AE:50:E6:87:3E:11:17:62:C3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:18:72:46:de:50:08:d5:8f:98:9c:ca:3f:2a:66:04:42:58:
         42:b2:f7:df:42:21:d5:92:97:db:c6:8f:75:f8:7c:5c:07:da:
         99:9a:ad:79:20:1a:8e:e8:91:86:91:e7:18:41:ee:ca:a9:65:
         fa:47:55:89:84:5e:af:9c:f7:b1:8a:8a:49:52:dd:98:28:eb:
         3c:64:24:ce:9a:b6:53:ce:94:b5:33:69:71:6b:76:13:fc:b7:
         7d:73:b5:cb:b7:2a:6e:8a:b9:66:e2:31:8b:e0:89:57:b9:8c:
         02:5f:5e:96:6c:68:23:d0:5b:b5:92:a8:5b:2d:6d:28:18:9d:
         85:47:7f:a7:c2:65:33:f8:dc:bc:85:ae:7d:2b:27:e0:57:e3:
         32:3d:b5:58:34:61:15:e3:49:86:8f:95:89:06:49:a4:32:25:
         38:91:bc:61:ba:c6:dd:7e:22:c4:55:02:73:77:61:55:35:54:
         69:fd:fd:83:4c:b7:75:04:fb:ff:2b:a1:da:bb:78:18:f5:b2:
         d4:1f:a0:81:8d:e3:b9:2d:1b:a7:fb:80:c7:69:6d:65:ea:59:
         b9:d2:da:76:42:0c:f9:5f:e2:01:80:55:4b:82:dd:70:54:88:
         f0:cf:02:58:d1:f1:96:69:66:35:23:bd:7a:0c:24:26:62:39:
         ae:2f:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----